add cgroup cleanup support

This adds the ability to kill all processes within a service's cgroup
when that service is stopped or restarted.
fsck: fix typo

X-Gentoo-Bug: 467158
X-Gentoo-Bug-URL: https://bugs.gentoo.org/show_bug.cgi?id=467158